PKIoverheid: TSP CIBG Findings in 2025 ETSI Audit - Incident Report #5 – Risk Management

The PKIoverheid CA underwent an ETSI audit which identified several compliance issues in their Risk Management process. Key deficiencies included a lack of formal approval for the Risk Treatment plan, incomplete risk assessments, and an inadequate document management process. The CA has since implemented corrective actions, including improving the Risk Management process and expanding the document management framework. All action items related to the incident have been closed, and a Report Closure Summary has been issued.

1. 2025-09-26 Auditor identifies finding
2. 2025-10-23 Created Corrective Action Plan
3. 2025-11-06 Corrective Action Plan Approved by auditor
4. 2026-01-30 Report Closure Summary issued